@canonmsg/agent-sdk 13.0.3 → 13.2.0

package/dist/chunks/{chunk-XKUG2BQR.js → chunk-6FD6KFQN.js}

@@ -11,6 +11,7 @@ import {
 } from "./chunk-DTAWEQCM.js";
 import {
   BoundedFileReadError,
+  CanonApiError,
   CanonClient,
   MAX_CANON_MEDIA_BYTES,
   RUNTIME_NEW_SESSION_ACTION,
@@ -18,7 +19,6 @@ import {
   RUNTIME_STOP_AND_DROP_ACTION,
   acquireLock,
   conversationMediaCacheDir,
-  createCompletedOutputJournal,
   createRuntimeHeartbeat,
   createRuntimeStatePublisher,
   inferUploadMimeType,
@@ -31,7 +31,7 @@ import {
   resolveCanonRuntimeConnection,
   splitTextWithinBytes,
   verifyCanonRuntimeConnection
-} from "./chunk-ZPBOGOAD.js";
+} from "./chunk-5YKGDUJX.js";
 import {
   NodeMlsDevCustodyError,
   createNodeMlsDevCustody,
@@ -262,9 +262,9 @@ function stdioRpc(child, handlers, { name, envelope }) {
     }, PIPE_GRACE_MS).unref();
   });
   return {
-    call: /* @__PURE__ */ __name((method, params) => new Promise((resolve3, reject) => {
+    call: /* @__PURE__ */ __name((method, params) => new Promise((resolve4, reject) => {
       next += 1;
-      pending.set(next, { resolve: /* @__PURE__ */ __name((value) => resolve3(isRecord(value) ? value : {}), "resolve"), reject });
+      pending.set(next, { resolve: /* @__PURE__ */ __name((value) => resolve4(isRecord(value) ? value : {}), "resolve"), reject });
       write({ id: next, method, params });
     }), "call"),
     notify: /* @__PURE__ */ __name((method, params) => write({ method, ...params ? { params } : {} }), "notify"),
@@ -341,11 +341,11 @@ async function checkAcp({ command, args = [], cwd, timeoutMs = 3e4 }) {
   const link = stdioRpc(child, { notify: /* @__PURE__ */ __name(() => void 0, "notify"), request: /* @__PURE__ */ __name((method) => refuseMethod(method), "request") }, { name: basename(command), envelope: { jsonrpc: "2.0" } });
   let timer;
   try {
-    return await new Promise((resolve3, reject) => {
+    return await new Promise((resolve4, reject) => {
       timer = setTimeout(() => reject(new Error(`${command} did not answer the Agent Client Protocol's initialize within ${timeoutMs / 1e3} s`)), timeoutMs);
       child.once("error", (error) => reject(new Error(`Could not run ${command}: ${error.message}`)));
       child.once("close", () => reject(new Error(`${command} exited before answering the Agent Client Protocol's initialize`)));
-      initialize(link, command).then(({ capabilities, info }) => resolve3({
+      initialize(link, command).then(({ capabilities, info }) => resolve4({
         name: text(info.title) || text(info.name) || basename(command),
         version: text(info.version),
         sessionMemory: restoreMethod(capabilities) ? "native" : "none"
@@ -401,8 +401,8 @@ function acpDriver(options) {
       if (guest && options.guestMode === void 0 && !options.unguardedGuests) return { reply: OWNER_ONLY };
       const child = startAgent(command, args, cwd);
       let exit = /* @__PURE__ */ __name(() => void 0, "exit");
-      const exited = new Promise((resolve3) => {
-        exit = resolve3;
+      const exited = new Promise((resolve4) => {
+        exit = resolve4;
       });
       let killing;
       let stopping = false;
@@ -413,7 +413,7 @@ function acpDriver(options) {
       }, "close"), exited };
       running.set(turn.session, entry);
       const server = `${CANON}_${randomBytes(4).toString("hex")}`;
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve4, reject) => {
         const messages = [];
         const calls = /* @__PURE__ */ new Map();
         let sessionId = "";
@@ -439,7 +439,7 @@ function acpDriver(options) {
           finish();
           if (turn.signal.aborted) reject(turn.signal.reason);
           else if (outcome instanceof Error) reject(outcome);
-          else resolve3(outcome);
+          else resolve4(outcome);
         }, "settle");
         const stopGuest = /* @__PURE__ */ __name((what) => {
           link.notify("session/cancel", { sessionId });
@@ -532,10 +532,10 @@ ${text(item.newText)}`);
         child.once("exit", () => {
           if (stopping || guest || turn.signal.aborted) {
             signalAgent(child, "SIGTERM");
-            ended = new Promise((resolve4) => {
+            ended = new Promise((resolve5) => {
               setTimeout(() => {
                 signalAgent(child, "SIGKILL");
-                resolve4();
+                resolve5();
               }, KILL_AFTER_MS);
             });
           }
@@ -789,8 +789,8 @@ function claudeDriver(options) {
       const resume = turn.state.get(SESSION2);
       const native = query({ prompt: turn.prompt, options: queryOptions(turn, resume) });
       let exit = /* @__PURE__ */ __name(() => void 0, "exit");
-      const entry = { close: /* @__PURE__ */ __name(() => native.close(), "close"), exited: new Promise((resolve3) => {
-        exit = resolve3;
+      const entry = { close: /* @__PURE__ */ __name(() => native.close(), "close"), exited: new Promise((resolve4) => {
+        exit = resolve4;
       }) };
       running.set(turn.session, entry);
       let closing;
@@ -803,7 +803,7 @@ function claudeDriver(options) {
       }, "interrupt");
       turn.signal.addEventListener("abort", interrupt, { once: true });
       const reader = liveReader(turn);
-      return new Promise((resolve3, reject) => void (async () => {
+      return new Promise((resolve4, reject) => void (async () => {
         let session = resume;
         let started = false;
         let finished = false;
@@ -820,7 +820,7 @@ function claudeDriver(options) {
             closeLater();
             if (message2.subtype === "success" && !message2.is_error) {
               const reply = message2.result.trim() ? message2.result : reader.text();
-              resolve3({ reply: reply.trim() ? reply : null });
+              resolve4({ reply: reply.trim() ? reply : null });
             } else {
               const detail = message2.subtype === "success" ? message2.result : message2.errors.join("; ");
               reject(failed(new Error(`Claude Code ended the turn with ${message2.subtype}${detail ? `: ${oneLine2(detail, 300)}` : ""}`)));
@@ -1112,14 +1112,14 @@ function codexDriver(options) {
       const cli = installedCli(codexPath);
       const child = spawn3(cli.file, [...cli.args, "app-server", "--listen", "stdio://"], { cwd, env, stdio: ["pipe", "pipe", "pipe"], windowsHide: true });
       let exit = /* @__PURE__ */ __name(() => void 0, "exit");
-      const exited = new Promise((resolve3) => {
-        exit = resolve3;
+      const exited = new Promise((resolve4) => {
+        exit = resolve4;
       });
       const entry = { close: /* @__PURE__ */ __name(() => {
         stopCli(child);
       }, "close"), exited };
       running.set(turn.session, entry);
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve4, reject) => {
         const messages = /* @__PURE__ */ new Map();
         const items = /* @__PURE__ */ new Map();
         const completed = /* @__PURE__ */ new Map();
@@ -1145,7 +1145,7 @@ function codexDriver(options) {
           finish();
           if (turn.signal.aborted) reject(turn.signal.reason);
           else if (outcome instanceof Error) reject(outcome);
-          else resolve3(outcome);
+          else resolve4(outcome);
         }, "settle");
         const conclude = /* @__PURE__ */ __name(() => {
           const ended = completed.get(nativeTurn);
@@ -1343,8 +1343,8 @@ function connectorDriver() {
       entry.confirmation = confirmation;
       const deadline = options.deadline ?? Date.now() + CONNECTOR_RELAY_ANSWER_WITHIN_MS;
       let timer;
-      const late = new Promise((resolve3) => {
-        timer = setTimeout(resolve3, Math.max(0, deadline - Date.now()), "late");
+      const late = new Promise((resolve4) => {
+        timer = setTimeout(resolve4, Math.max(0, deadline - Date.now()), "late");
       });
       const confirmed = await Promise.race([confirmation, late]).finally(() => clearTimeout(timer));
       const state = entry.state;
@@ -1383,7 +1383,7 @@ function connectorDriver() {
       ])).digest("hex").slice(0, 40)}`;
       const input = fitInput(inputId, turn);
       if (!input) return Promise.reject(new Error(TOO_LARGE));
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve4, reject) => {
         const entry = {
           ref: { inputId, conversationId: turn.input.conversationId, messageId: messages.at(-1).id, createdAt: messages.at(-1).createdAt },
           session: turn.session,
@@ -1393,9 +1393,9 @@ function connectorDriver() {
           finish: /* @__PURE__ */ __name((result) => {
             turn.signal.removeEventListener("abort", onAbort);
             if (result instanceof Error) reject(result);
-            else if (result.outcome === "reply") resolve3({ reply: result.text });
+            else if (result.outcome === "reply") resolve4({ reply: result.text });
             else if (result.outcome === "failed") reject(new Error(FAILED));
-            else resolve3({ reply: null });
+            else resolve4({ reply: null });
           }, "finish")
         };
         const onAbort = /* @__PURE__ */ __name(() => withdraw(entry, turn.signal.reason), "onAbort");
@@ -1531,7 +1531,7 @@ var answered = /* @__PURE__ */ __name((kind, record) => record.status !== "sendi
 async function awaitErrand(directory, command, ms) {
   const journal = errandJournal(directory);
   let record;
-  for (const deadline = Date.now() + ms; Date.now() < deadline; await new Promise((resolve3) => setTimeout(resolve3, 200))) {
+  for (const deadline = Date.now() + ms; Date.now() < deadline; await new Promise((resolve4) => setTimeout(resolve4, 200))) {
     record = journal.get(command.id);
     if (record && answered(command.kind, record)) break;
   }
@@ -1585,7 +1585,7 @@ ${name}`, `Errands: ${name} in the inbox is not a command file; it is left alone
       }
       const path = join2(inbox, name);
       try {
-        if (handler.taken(id) || await handler.take(id, readCommand(path, id))) unlinkSync(path);
+        if (await handler.taken(id) || await handler.take(id, readCommand(path, id))) unlinkSync(path);
       } catch (error) {
         if (error.code === "ENOENT") continue;
         const reason = error instanceof Error ? error.message : String(error);
@@ -2161,9 +2161,9 @@ function managedMlsDevice(options) {
   }
   __name(device, "device");
   const custody2 = {
-    prepareProtected: /* @__PURE__ */ __name((context, ...rest) => device(context, false).then((open4) => open4.prepareProtected(context, ...rest)), "prepareProtected"),
-    prepareProtectedKeyPackage: /* @__PURE__ */ __name((context, ...rest) => device(context, false).then((open4) => open4.prepareProtectedKeyPackage(context, ...rest)), "prepareProtectedKeyPackage"),
-    prepareProtectedGroup: /* @__PURE__ */ __name((identity, ...rest) => device(identity, false).then((open4) => open4.prepareProtectedGroup(identity, ...rest)), "prepareProtectedGroup")
+    prepareProtected: /* @__PURE__ */ __name((context, ...rest) => device(context, false).then((open5) => open5.prepareProtected(context, ...rest)), "prepareProtected"),
+    prepareProtectedKeyPackage: /* @__PURE__ */ __name((context, ...rest) => device(context, false).then((open5) => open5.prepareProtectedKeyPackage(context, ...rest)), "prepareProtectedKeyPackage"),
+    prepareProtectedGroup: /* @__PURE__ */ __name((identity, ...rest) => device(identity, false).then((open5) => open5.prepareProtectedGroup(identity, ...rest)), "prepareProtectedGroup")
   };
   return {
     configuration,
@@ -2181,7 +2181,7 @@ function managedMlsDevice(options) {
       return false;
     },
     async close() {
-      await Promise.allSettled([...devices.values()].map((open4) => open4.then((custody3) => custody3.close())));
+      await Promise.allSettled([...devices.values()].map((open5) => open5.then((custody3) => custody3.close())));
     }
   };
 }
@@ -2413,10 +2413,10 @@ function relayRunnerHome(home, installationId) {
 __name(relayRunnerHome, "relayRunnerHome");
 
 // src/runner/runner.ts
-import { createHash as createHash8 } from "node:crypto";
-import { readFileSync as readFileSync6, rmSync as rmSync2 } from "node:fs";
+import { createHash as createHash9, randomUUID as randomUUID2 } from "node:crypto";
+import { readFileSync as readFileSync7, rmSync as rmSync2 } from "node:fs";
 import { realpath as realpath4, stat as stat2 } from "node:fs/promises";
-import { basename as basename4, isAbsolute as isAbsolute3, join as join7, sep } from "node:path";
+import { basename as basename4, isAbsolute as isAbsolute3, join as join8, sep } from "node:path";
 
 // ../agent-tools/src/communication-tool.ts
 var CANON_COMMUNICATE_DISCOVERY_MAX_RESULTS = 10;
@@ -2638,6 +2638,54 @@ async function executeCanonCommunicateTool(client, args) {
 }
 __name(executeCanonCommunicateTool, "executeCanonCommunicateTool");
 
+// src/runner/finals.ts
+import { createHash as createHash7 } from "node:crypto";
+import { readdirSync as readdirSync3, readFileSync as readFileSync5, rmdirSync, unlinkSync as unlinkSync2 } from "node:fs";
+import { join as join6 } from "node:path";
+var sha2562 = /* @__PURE__ */ __name((value) => createHash7("sha256").update(value).digest("hex"), "sha256");
+async function importFinals(directory, scope, input) {
+  const folder = join6(directory, sha2562(JSON.stringify(scope)));
+  let names;
+  try {
+    names = readdirSync3(folder);
+  } catch {
+    return;
+  }
+  for (const name of names.sort()) {
+    const match = /^([a-f0-9]{64})(\.\d+\.[a-f0-9-]+\.tmp|\.json)$/.exec(name);
+    if (!match) continue;
+    const path = join6(folder, name);
+    const torn = match[2] !== ".json";
+    let record;
+    try {
+      record = JSON.parse(readFileSync5(path, "utf8"));
+    } catch {
+      record = void 0;
+    }
+    if (!input.valid(record) || sha2562(record.turnId) !== match[1]) {
+      if (torn) {
+        try {
+          unlinkSync2(path);
+        } catch (error) {
+          input.warn(`torn output write ${name}`)(error);
+        }
+      } else input.warn(`saved output ${name}`)(new Error("it is not a valid output; it stays for operator reconciliation"));
+      continue;
+    }
+    try {
+      await input.save(record);
+      unlinkSync2(path);
+    } catch (error) {
+      input.warn(`saved output ${name} stays where it was`)(error);
+    }
+  }
+  try {
+    rmdirSync(folder);
+  } catch {
+  }
+}
+__name(importFinals, "importFinals");
+
 // src/runner/live.ts
 import { randomBytes as randomBytes3 } from "node:crypto";
 var KEEPALIVE_MS = 3500;
@@ -2681,19 +2729,19 @@ function createLivePublisher(options) {
 __name(createLivePublisher, "createLivePublisher");
 
 // src/runner/mls-ask.ts
-import { createHash as createHash7 } from "node:crypto";
-import { readdirSync as readdirSync3, readFileSync as readFileSync5, rmSync } from "node:fs";
-import { join as join6 } from "node:path";
-var sha2562 = /* @__PURE__ */ __name((value) => createHash7("sha256").update(value).digest("hex"), "sha256");
-var pause = /* @__PURE__ */ __name((ms) => new Promise((resolve3) => {
-  setTimeout(resolve3, ms).unref?.();
+import { createHash as createHash8 } from "node:crypto";
+import { readdirSync as readdirSync4, readFileSync as readFileSync6, rmSync } from "node:fs";
+import { join as join7 } from "node:path";
+var sha2563 = /* @__PURE__ */ __name((value) => createHash8("sha256").update(value).digest("hex"), "sha256");
+var pause = /* @__PURE__ */ __name((ms) => new Promise((resolve4) => {
+  setTimeout(resolve4, ms).unref?.();
 }), "pause");
-var pauseUnless = /* @__PURE__ */ __name((ms, signal) => new Promise((resolve3) => {
-  if (signal.aborted) return resolve3();
+var pauseUnless = /* @__PURE__ */ __name((ms, signal) => new Promise((resolve4) => {
+  if (signal.aborted) return resolve4();
   const done = /* @__PURE__ */ __name(() => {
     clearTimeout(timer);
     signal.removeEventListener("abort", done);
-    resolve3();
+    resolve4();
   }, "done");
   const timer = setTimeout(done, ms);
   timer.unref?.();
@@ -2738,10 +2786,10 @@ function createMlsAsks(options, approvalScope2) {
       });
     }
   });
-  const file = /* @__PURE__ */ __name((conversationId, requestId) => join6(options.directory, `${sha2562(JSON.stringify([conversationId, requestId])).slice(0, 32)}.json`), "file");
+  const file = /* @__PURE__ */ __name((conversationId, requestId) => join7(options.directory, `${sha2563(JSON.stringify([conversationId, requestId])).slice(0, 32)}.json`), "file");
   const save = /* @__PURE__ */ __name((journal) => writeDurable(file(journal.conversationId, journal.requestId), JSON.stringify(journal)), "save");
   const forget = /* @__PURE__ */ __name((journal) => rmSync(file(journal.conversationId, journal.requestId), { force: true }), "forget");
-  const operationOf = /* @__PURE__ */ __name((conversationId, messageId) => `runner-mls-ask:${sha2562(JSON.stringify([conversationId, messageId])).slice(0, 48)}`, "operationOf");
+  const operationOf = /* @__PURE__ */ __name((conversationId, messageId) => `runner-mls-ask:${sha2563(JSON.stringify([conversationId, messageId])).slice(0, 48)}`, "operationOf");
   const withdrawalOf = /* @__PURE__ */ __name((journal) => operationOf(journal.conversationId, `${journal.requestId}:withdraw`), "withdrawalOf");
   const audienceChanged = /* @__PURE__ */ __name((error) => codeOf(error) === "MLS_DEV_AUDIENCE_CHANGED", "audienceChanged");
   const sameHead = /* @__PURE__ */ __name((a, b) => JSON.stringify(a.head) === JSON.stringify(b.head), "sameHead");
@@ -2986,14 +3034,14 @@ function createMlsAsks(options, approvalScope2) {
         }
       }
       if (signal.aborted) throw ended();
-      await new Promise((resolve3) => {
+      await new Promise((resolve4) => {
         const timer = setTimeout(done, Math.max(0, Math.min(pollMs, expiresAtMs - Date.now())));
         timer.unref?.();
         function done() {
           clearTimeout(timer);
           signal.removeEventListener("abort", done);
           card.wake = () => void 0;
-          resolve3();
+          resolve4();
         }
         __name(done, "done");
         card.wake = done;
@@ -3004,12 +3052,12 @@ function createMlsAsks(options, approvalScope2) {
   __name(wait, "wait");
   function bounded(card, work) {
     const { expiresAtMs, signal } = card.input;
-    return new Promise((resolve3, reject) => {
-      const stop = /* @__PURE__ */ __name(() => resolve3(void 0), "stop");
+    return new Promise((resolve4, reject) => {
+      const stop = /* @__PURE__ */ __name(() => resolve4(void 0), "stop");
       const timer = setTimeout(stop, Math.max(0, expiresAtMs - Date.now()));
       timer.unref?.();
       signal.addEventListener("abort", stop, { once: true });
-      work.then(resolve3, reject).finally(() => {
+      work.then(resolve4, reject).finally(() => {
         clearTimeout(timer);
         signal.removeEventListener("abort", stop);
       });
@@ -3058,11 +3106,11 @@ function createMlsAsks(options, approvalScope2) {
           throw error;
         });
       })();
-      return new Promise((resolve3, reject) => {
+      return new Promise((resolve4, reject) => {
         const stop = /* @__PURE__ */ __name(() => reject(turnEnded()), "stop");
         if (signal.aborted) stop();
         else signal.addEventListener("abort", stop, { once: true });
-        work.then(resolve3, reject).finally(() => signal.removeEventListener("abort", stop));
+        work.then(resolve4, reject).finally(() => signal.removeEventListener("abort", stop));
       });
     },
     wake,
@@ -3075,18 +3123,18 @@ function createMlsAsks(options, approvalScope2) {
     async recover() {
       let names;
       try {
-        names = readdirSync3(options.directory).filter((name) => name.endsWith(".json"));
+        names = readdirSync4(options.directory).filter((name) => name.endsWith(".json"));
       } catch {
         return;
       }
       for (const name of names) {
         let journal;
         try {
-          journal = JSON.parse(readFileSync5(join6(options.directory, name), "utf8"));
+          journal = JSON.parse(readFileSync6(join7(options.directory, name), "utf8"));
           if (journal.version !== 1 || typeof journal.conversationId !== "string" || typeof journal.requestId !== "string" || !Array.isArray(journal.sends) || journal.sends.some((sent) => typeof sent?.operationId !== "string" || typeof sent.messageId !== "string")) throw new Error();
           for (const sent of journal.sends) sent.audience = snapshotMlsAudience(sent.audience);
         } catch {
-          rmSync(join6(options.directory, name), { force: true });
+          rmSync(join7(options.directory, name), { force: true });
           continue;
         }
         try {
@@ -3158,9 +3206,9 @@ async function startToolServer() {
       if (!response.headersSent) response.writeHead(500).end();
     });
   });
-  await new Promise((resolve3, reject) => {
+  await new Promise((resolve4, reject) => {
     http.once("error", reject);
-    http.listen(0, "127.0.0.1", resolve3);
+    http.listen(0, "127.0.0.1", resolve4);
   });
   const { port } = http.address();
   return {
@@ -3171,10 +3219,10 @@ async function startToolServer() {
         turns.delete(token);
       }, "release") };
     },
-    close: /* @__PURE__ */ __name(() => new Promise((resolve3) => {
+    close: /* @__PURE__ */ __name(() => new Promise((resolve4) => {
       turns.clear();
       http.closeAllConnections();
-      http.close(() => resolve3());
+      http.close(() => resolve4());
     }), "close")
   };
 }
@@ -3182,7 +3230,42 @@ __name(startToolServer, "startToolServer");
 
 // src/runner/runner.ts
 var STOPS = ["stop", "drop", "new_session", "membership", "audience"];
+var toCompletion = /* @__PURE__ */ __name((record) => ({
+  version: 1,
+  id: record.turnId,
+  conversationId: record.conversationId,
+  createdAt: record.createdAt,
+  inputIds: record.inputs,
+  fence: record.mls ?? null,
+  output: {
+    text: record.text,
+    options: record.options,
+    notice: record.notice,
+    ...record.items ? { items: record.items } : {},
+    ...record.parts !== void 0 ? { parts: record.parts } : {},
+    ...record.errand ? { errand: record.errand } : {},
+    ...record.proactive ? { proactive: true } : {},
+    ...record.sent ? { sent: record.sent } : {}
+  }
+}), "toCompletion");
+var fromCompletion = /* @__PURE__ */ __name(({ id, conversationId, createdAt, inputIds, fence, output }) => ({
+  turnId: id,
+  conversationId,
+  createdAt,
+  inputs: inputIds,
+  ...output,
+  ...fence ? { mls: fence } : {}
+}), "fromCompletion");
+var isOutputFile = /* @__PURE__ */ __name((record) => {
+  const value = record;
+  return !!value && value.version === 1 && typeof value.turnId === "string" && !!value.turnId && typeof value.conversationId === "string" && !!value.conversationId && typeof value.createdAt === "string" && typeof value.text === "string" && typeof value.options?.messageId === "string" && Array.isArray(value.inputs) && value.inputs.every((id) => typeof id === "string" && !!id) && typeof value.notice === "boolean" && (value.mls === void 0 || !!value.mls && typeof value.mls === "object") && (value.parts === void 0 || Number.isSafeInteger(value.parts)) && (value.errand === void 0 || typeof value.errand === "string") && (value.proactive === void 0 || value.proactive === true) && (value.sent === void 0 || typeof value.sent?.fingerprint === "string" && ["delivered", "refused"].includes(value.sent.outcome));
+}, "isOutputFile");
+var textFingerprint = /* @__PURE__ */ __name((text3) => createHash9("sha256").update(JSON.stringify(["canon.runner.proactive-text.v1", text3])).digest("hex"), "textFingerprint");
+var PLAINTEXT_START = ["opening-text-required", "encrypted-room-required"];
 var MAX_INPUTS_PER_TURN = 20;
+var OUTBOUND_UNANSWERED = ["queued", "sending", "deferred", "pending"];
+var INBOUND_UNSETTLED = ["observed", "deferred", "offered"];
+var ACTIVITY_COUNT_LIMIT = 1e3;
 var CLAIM_RETRY_MS = 250;
 var CLAIM_PATIENCE_MS = 2e4;
 var HISTORY_WINDOW = 20;
@@ -3243,19 +3326,19 @@ function answerText(answer) {
   return answer.text?.trim() ? answer.text : "They answered with an empty message.";
 }
 __name(answerText, "answerText");
-var sha2563 = /* @__PURE__ */ __name((value) => createHash8("sha256").update(value).digest("hex"), "sha256");
+var sha2564 = /* @__PURE__ */ __name((value) => createHash9("sha256").update(value).digest("hex"), "sha256");
 var toolText = /* @__PURE__ */ __name((text3, isError = false) => ({ content: [{ type: "text", text: text3 }], ...isError ? { isError } : {} }), "toolText");
 var turnEnded2 = /* @__PURE__ */ __name(() => new DOMException("This turn has ended", "AbortError"), "turnEnded");
 function within(promise, ms) {
   let timer;
-  const expiry = new Promise((resolve3) => {
-    timer = setTimeout(resolve3, ms, void 0);
+  const expiry = new Promise((resolve4) => {
+    timer = setTimeout(resolve4, ms, void 0);
   });
   return Promise.race([promise, expiry]).finally(() => clearTimeout(timer));
 }
 __name(within, "within");
-var pause2 = /* @__PURE__ */ __name((ms) => new Promise((resolve3) => {
-  setTimeout(resolve3, ms).unref?.();
+var pause2 = /* @__PURE__ */ __name((ms) => new Promise((resolve4) => {
+  setTimeout(resolve4, ms).unref?.();
 }), "pause");
 function agentRun(turns) {
   const history = turns.map(({ senderId, senderType }) => senderType === "ai_agent" ? { senderId, senderType, metadata: { turnSemantics: "turn_complete" } } : { senderId, senderType: "human" });
@@ -3344,7 +3427,7 @@ function approvalScope(request) {
   if (request.scopeKey !== void 0 && /^[A-Za-z0-9_:-]{1,64}$/.test(request.scopeKey)) return request.scopeKey;
   const key = request.scopeKey ?? request.title;
   const slug = key.toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "").slice(0, 40) || "approval";
-  return `${slug}-${sha2563(JSON.stringify([request.scopeKey === void 0 ? "title" : "scope", key])).slice(0, 16)}`;
+  return `${slug}-${sha2564(JSON.stringify([request.scopeKey === void 0 ? "title" : "scope", key])).slice(0, 16)}`;
 }
 __name(approvalScope, "approvalScope");
 var MAX_GROUP_PARTS = 100;
@@ -3432,6 +3515,11 @@ async function createRunner(options) {
   const maxTurns = driver.capabilities.maxConcurrentTurns ?? 8;
   const agentTurnCap = options.agentTurnCap ?? 6;
   if (!Number.isSafeInteger(agentTurnCap) || agentTurnCap < 0 || agentTurnCap > 1e3) throw new Error("agentTurnCap must be a whole number from 0 to 1000");
+  const { idleTimeoutMs, onIdle } = options;
+  if (idleTimeoutMs === void 0 !== (onIdle === void 0)) throw new Error("idleTimeoutMs and onIdle go together");
+  if (idleTimeoutMs !== void 0 && (!Number.isSafeInteger(idleTimeoutMs) || idleTimeoutMs < 1e3)) {
+    throw new Error("idleTimeoutMs must be a whole number of milliseconds, at least 1000");
+  }
   const names = /* @__PURE__ */ __name((list, what) => {
     if (list !== void 0 && (!Array.isArray(list) || list.some((name) => typeof name !== "string" || !name.trim() || name.length > 200))) {
       throw new Error(`${what} must be a list of non-empty names`);
@@ -3449,7 +3537,6 @@ async function createRunner(options) {
   let endpoint;
   let inbound;
   let heartbeat;
-  let journal;
   let agentId = "";
   let scope = "";
   let stopping;
@@ -3473,6 +3560,7 @@ async function createRunner(options) {
   const ruleNotes = /* @__PURE__ */ new Set();
   const guards = /* @__PURE__ */ new Map();
   const relaySends = /* @__PURE__ */ new Map();
+  const proactive = /* @__PURE__ */ new Map();
   let errands;
   let errandInbox2;
   let errandScope = "";
@@ -3484,13 +3572,90 @@ async function createRunner(options) {
   const halt = new AbortController();
   const untilHalt = /* @__PURE__ */ __name((work) => {
     let stop = /* @__PURE__ */ __name(() => void 0, "stop");
-    const halted = new Promise((resolve3) => {
-      stop = /* @__PURE__ */ __name(() => resolve3("pending"), "stop");
+    const halted = new Promise((resolve4) => {
+      stop = /* @__PURE__ */ __name(() => resolve4("pending"), "stop");
       if (halt.signal.aborted) stop();
       else halt.signal.addEventListener("abort", stop, { once: true });
     });
     return Promise.race([work, halted]).finally(() => halt.signal.removeEventListener("abort", stop));
   }, "untilHalt");
+  let lastActiveAt = Date.now();
+  let idleCalled = false;
+  let offering = 0;
+  let calls = 0;
+  const touch = /* @__PURE__ */ __name(() => {
+    lastActiveAt = Date.now();
+    idleCalled = false;
+  }, "touch");
+  async function activeCall(work) {
+    calls += 1;
+    touch();
+    try {
+      return await work();
+    } finally {
+      calls -= 1;
+      touch();
+    }
+  }
+  __name(activeCall, "activeCall");
+  function ownActivity() {
+    let turns = running.size;
+    let queued2 = offering;
+    for (const current of rooms.values()) {
+      queued2 += current.queue.length;
+      if (current.recovering) turns += 1;
+      if (current.resetting) turns += 1;
+    }
+    let errandsWaiting = 0;
+    for (const record of errandsById.values()) if (record.status === "pending") errandsWaiting += 1;
+    return { turns, queued: queued2, errands: errandsWaiting, sending: posting.size + calls };
+  }
+  __name(ownActivity, "ownActivity");
+  async function activity() {
+    if (stopping) throw new Error("The runner is stopping");
+    if (!inbound) throw new Error("Start the runner first");
+    const [operations, records] = await Promise.all([
+      endpoint.listOperations({ statuses: [...OUTBOUND_UNANSWERED], limit: ACTIVITY_COUNT_LIMIT }),
+      endpoint.listInbound({ states: [...INBOUND_UNSETTLED], limit: ACTIVITY_COUNT_LIMIT })
+    ]);
+    const own = ownActivity();
+    const unsettled = records.filter(({ event, deleted, externalClaim }) => event.kind === "message.created" && !deleted && !externalClaim).length;
+    const inputs = Math.max(own.queued, unsettled);
+    const outbound = own.sending + operations.length;
+    const idle = own.turns === 0 && inputs === 0 && own.errands === 0 && outbound === 0;
+    if (!idle) touch();
+    return { idle, lastActiveAt, turns: own.turns, inputs, errands: own.errands, outbound };
+  }
+  __name(activity, "activity");
+  function watchIdle() {
+    if (idleTimeoutMs === void 0) return;
+    let checking = false;
+    const check = /* @__PURE__ */ __name(async () => {
+      if (checking || stopping || idleCalled) return;
+      const own = ownActivity();
+      if (own.turns || own.queued || own.errands || own.sending) return touch();
+      checking = true;
+      try {
+        const now = await activity();
+        if (now.idle && !stopping && !idleCalled && Date.now() - lastActiveAt >= idleTimeoutMs) {
+          idleCalled = true;
+          try {
+            onIdle(now);
+          } catch (error) {
+            warn("onIdle")(error);
+          }
+        }
+      } catch (error) {
+        if (!stopping) warn("idle check")(error);
+      } finally {
+        checking = false;
+      }
+    }, "check");
+    const timer = setInterval(() => void check(), Math.min(3e4, Math.max(1e3, Math.floor(idleTimeoutMs / 4))));
+    timer.unref?.();
+    detach.push(() => clearInterval(timer));
+  }
+  __name(watchIdle, "watchIdle");
   const room = /* @__PURE__ */ __name((id) => {
     let found = rooms.get(id);
     if (!found) rooms.set(id, found = { id, queue: [], errands: [], controls: Promise.resolve(), lane: Promise.resolve() });
@@ -3499,7 +3664,7 @@ async function createRunner(options) {
   const dispose = /* @__PURE__ */ __name((inputs, kind, reason) => Promise.allSettled(inputs.map((input) => input.handle[kind](reason))).then(() => void 0), "dispose");
   const settle = /* @__PURE__ */ __name(async (ids, reason) => (await Promise.allSettled(ids.map((id) => endpoint.setInboundState(id, "settled", reason)))).every(({ status }) => status === "fulfilled"), "settle");
   const queued = /* @__PURE__ */ __name((turn) => turn.inputs.filter((input) => input.handle.phase === "queued"), "queued");
-  const turnId = /* @__PURE__ */ __name((roomId, inputs) => `turn-${sha2563(JSON.stringify([roomId, ...inputs.map((input) => [input.id, input.generation])])).slice(0, 32)}`, "turnId");
+  const turnId = /* @__PURE__ */ __name((roomId, inputs) => `turn-${sha2564(JSON.stringify([roomId, ...inputs.map((input) => [input.id, input.generation])])).slice(0, 32)}`, "turnId");
   const livePublisher = /* @__PURE__ */ __name((current, turn) => createLivePublisher({
     client,
     conversationId: current.id,
@@ -3508,7 +3673,7 @@ async function createRunner(options) {
       current.lane = current.lane.then(publish2).catch(() => void 0);
     }, "enqueue")
   }), "livePublisher");
-  const stateFile = /* @__PURE__ */ __name((session) => join7(home, "runner", options.environmentId, agentId, "state", driver.name, `${sha2563(JSON.stringify([scope, session]))}.json`), "stateFile");
+  const stateFile = /* @__PURE__ */ __name((session) => join8(home, "runner", options.environmentId, agentId, "state", driver.name, `${sha2564(JSON.stringify([scope, session]))}.json`), "stateFile");
   const resetSession = /* @__PURE__ */ __name(async (session) => {
     rmSync2(stateFile(session), { force: true });
     mlsAsks?.endSession(session);
@@ -3569,9 +3734,21 @@ ${error instanceof Error ? error.message : String(error)}`;
   }
   __name(progress, "progress");
   async function offer(event) {
+    offering += 1;
+    touch();
+    try {
+      await take(event);
+    } finally {
+      offering -= 1;
+      touch();
+    }
+  }
+  __name(offer, "offer");
+  async function take(event) {
     const handle = await endpoint.acquireInbound(event.id);
     if (!handle) return;
     const roomId = event.data.conversationId ?? "";
+    const clears = rooms.get(roomId)?.clears;
     const input = await admitInput(event, handle).catch(async (error) => {
       deferredNote(roomId)(error);
       await handle.release("not-admitted-yet");
@@ -3580,11 +3757,12 @@ ${error instanceof Error ? error.message : String(error)}`;
     if (!input) return;
     if (stopping) return void await handle.release("runner-stopping");
     const target = room(input.payload.conversationId);
+    if (target.clears !== clears) return void await dispose([input], "cancel", "stop-and-clear");
     target.queue.push(input);
     requeue(target);
     pump();
   }
-  __name(offer, "offer");
+  __name(take, "take");
   async function admitInput(event, handle) {
     const payload = event.data;
     const { conversationId } = payload;
@@ -3735,11 +3913,13 @@ ${decision.reasonCode}`;
         turn.live.end("ended");
         if (candidate.turn === turn) candidate.turn = void 0;
         running.delete(done);
+        touch();
         rooms.delete(candidate.id);
         rooms.set(candidate.id, candidate);
         pump();
       });
       running.add(done);
+      touch();
     }
     while (localErrands.length && !stopping && running.size < maxTurns) startErrand(void 0, localErrands.shift());
   }
@@ -3961,7 +4141,7 @@ ${decision.reasonCode}`;
     return check;
   }
   __name(reaudience, "reaudience");
-  const inboundMedia = /* @__PURE__ */ __name((conversationId) => ({ agentId: "inbound", conversationId, rootDir: join7(home, "runner", options.environmentId, agentId) }), "inboundMedia");
+  const inboundMedia = /* @__PURE__ */ __name((conversationId) => ({ agentId: "inbound", conversationId, rootDir: join8(home, "runner", options.environmentId, agentId) }), "inboundMedia");
   async function materialize(current, turn) {
     if (driver.capabilities.remote) return;
     for (const { payload: { message: message2 } } of turn.inputs) {
@@ -4012,7 +4192,7 @@ ${decision.reasonCode}`;
       ask_question: /* @__PURE__ */ __name(async (args) => {
         const question = questionOf(args);
         if (typeof question === "string") return { result: toolText(question, true) };
-        const key = sha2563(JSON.stringify(question));
+        const key = sha2564(JSON.stringify(question));
         const waiting = questions.get(key);
         const entry = waiting?.waiting ? waiting : { id: `canon:ask_question:${asked += 1}`, waiting: true };
         questions.set(key, entry);
@@ -4095,7 +4275,7 @@ ${decision.reasonCode}`;
       }
     }
     if (errand && "contact" in errand.target && (command.action === "start_conversation" || command.action === "start_direct") && command.principalId === errand.target.contact) {
-      const result = await client.communicate({ ...command, action: "start_conversation", selection: { mode: "new" } });
+      const result = await startConversation({ ...command, action: "start_conversation", selection: { mode: "new" } });
       if (result.status === "messaged") reach(turn, result.conversationId);
       return toolText(`communicate: ${result.status}
 ${JSON.stringify(result, null, 2)}`);
@@ -4111,20 +4291,18 @@ ${JSON.stringify(result, null, 2)}`);
       turn.said.set(messageId, sending = (async () => {
         const mls2 = audience ?? (await currentAudience(roomId)).audience;
         const record = {
-          version: 1,
           turnId: messageId,
           conversationId: roomId,
           createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-          audience: null,
           inputs: [],
           text: text3,
           options: { messageId },
           notice: false,
           mls: mls2
         };
-        saveOutput(record);
+        await saveOutput(record);
         const sent2 = await publish(record, turn.retire.signal);
-        if (sent2 !== "pending") journal.remove(messageId);
+        if (sent2 !== "pending") await endpoint.finishCompletion(messageId);
         else if (turn.retire.signal.aborted) await stopOutput(record);
         return sent2;
       })().catch((error) => {
@@ -4170,9 +4348,9 @@ ${JSON.stringify(result, null, 2)}`);
   async function outcomeOf(turn, work) {
     const signal = turn.controller.signal;
     const settled = work.then((result) => ({ result }), (error) => ({ error }));
-    const aborted = new Promise((resolve3) => {
-      if (signal.aborted) resolve3(void 0);
-      else signal.addEventListener("abort", () => resolve3(void 0), { once: true });
+    const aborted = new Promise((resolve4) => {
+      if (signal.aborted) resolve4(void 0);
+      else signal.addEventListener("abort", () => resolve4(void 0), { once: true });
     });
     const first = await Promise.race([settled, aborted]);
     if (first && !signal.aborted) return first;
@@ -4208,11 +4386,9 @@ ${JSON.stringify(result, null, 2)}`);
       const kind = failed ? "failed" : "final";
       const replyAuthority = await replyGrant(current.id, turn.inputs.at(-1).payload.message.id, stopped);
       const record = {
-        version: 1,
         turnId: turn.id,
         conversationId: current.id,
         createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-        audience: null,
         inputs: turn.inputs.map((input) => input.id),
         text: text3,
         ...items.length ? { items } : {},
@@ -4220,7 +4396,7 @@ ${JSON.stringify(result, null, 2)}`);
         notice: failed,
         mls: audience
       };
-      saveOutput(record);
+      await saveOutput(record);
       sent = await publish(record, turn.retire.signal);
       if (sent === "pending" && !stopped()) return turn.live.end(turn.reason && STOPS.includes(turn.reason) ? "stopped" : "ended");
       if (sent === "pending") await stopOutput(record);
@@ -4234,7 +4410,7 @@ ${JSON.stringify(result, null, 2)}`);
       if (current.session === turn.session) current.session = void 0;
     }
     const reason = stopped() ? turn.reason : silent ? "silent" : answered2 ? "answered" : "failed";
-    if (await settle(turn.inputs.map((input) => input.id), reason) && sent !== void 0) journal.remove(turn.id);
+    await endpoint.finishCompletion(turn.id, { inputIds: turn.inputs.map((input) => input.id), reason }).catch(warn("reply kept for restart recovery"));
   }
   __name(deliver, "deliver");
   const forOwner2 = /* @__PURE__ */ __name((turn) => turn.inputs.every(({ payload: { message: message2 } }) => message2.isOwner === true || message2.senderType === "ai_agent" && turn.trusted.has(message2.id)), "forOwner");
@@ -4264,11 +4440,16 @@ ${JSON.stringify(result, null, 2)}`);
   }
   __name(send, "send");
   const partsOf = /* @__PURE__ */ __name((text3, options2) => encryptedParts(text3, options2.replyAuthority ? MAX_REPLY_PARTS : MAX_GROUP_PARTS), "partsOf");
-  function saveOutput(record) {
+  async function saveOutput(record) {
     record.parts = partsOf(record.text, record.options).length;
-    journal.save(record);
+    await endpoint.saveCompletion(toCompletion(record));
   }
   __name(saveOutput, "saveOutput");
+  const outputs = /* @__PURE__ */ __name(async () => (await endpoint.listCompletions()).map(fromCompletion).filter((record) => !record.sent), "outputs");
+  const savedOutput = /* @__PURE__ */ __name(async (turnId2) => {
+    const found = await endpoint.getCompletion(turnId2);
+    return found && fromCompletion(found);
+  }, "savedOutput");
   function encryptedMessages(mls2, text3, options2, record) {
     const all = record && record.parts === void 0 ? [fitEncrypted(text3)] : partsOf(text3, options2);
     return all.slice(0, record?.parts).map((part, index) => ({
@@ -4284,11 +4465,9 @@ ${JSON.stringify(result, null, 2)}`);
       const status = (await endpoint.getOperation(encryptedOperation(record.mls, messageId)))?.status;
       if (status && status !== "succeeded" && status !== "rejected") queued2 = index + 1;
     }
-    if (queued2) {
-      const { items: _items, errand: _errand, ...rest } = record;
-      journal.save({ ...rest, turnId: `${record.turnId}:stopped`, inputs: [], parts: queued2 });
-    }
-    journal.remove(record.turnId);
+    const { items: _items, errand: _errand, ...rest } = record;
+    if (queued2) await endpoint.replaceCompletion(record.turnId, toCompletion({ ...rest, turnId: `${record.turnId}:stopped`, inputs: [], parts: queued2 }));
+    else await endpoint.finishCompletion(record.turnId);
   }
   __name(stopOutput, "stopOutput");
   async function sendEncrypted(audience, messageId, text3, signal, replyAuthority) {
@@ -4384,7 +4563,7 @@ ${JSON.stringify(result, null, 2)}`);
     return { items, refused: refused2 };
   }
   __name(admitItems, "admitItems");
-  const encryptedOperation = /* @__PURE__ */ __name((audience, messageId) => `runner-mls:${sha2563(JSON.stringify([audience.conversationId, messageId])).slice(0, 48)}`, "encryptedOperation");
+  const encryptedOperation = /* @__PURE__ */ __name((audience, messageId) => `runner-mls:${sha2564(JSON.stringify([audience.conversationId, messageId])).slice(0, 48)}`, "encryptedOperation");
   function forgetGuard(audience, messageId, sent) {
     if (sent === "pending") return;
     const operationId = encryptedOperation(audience, messageId);
@@ -4414,8 +4593,8 @@ ${JSON.stringify(result, null, 2)}`);
       ...turn.facts ? { roomFacts: turn.facts } : {}
     });
     const line = /* @__PURE__ */ __name((message2, mark = "") => promptLine(message2, message2.senderId === agentId ? "You" : message2.senderName ?? message2.senderId, turn.media.get(message2.id), mark), "line");
-    const open4 = /* @__PURE__ */ __name(() => turn.open && !turn.controller.signal.aborted, "open");
-    const live = /* @__PURE__ */ __name(() => open4() && !turn.silenced, "live");
+    const open5 = /* @__PURE__ */ __name(() => turn.open && !turn.controller.signal.aborted, "open");
+    const live = /* @__PURE__ */ __name(() => open5() && !turn.silenced, "live");
     return {
       session: turn.session,
       // §12.6: an errand turn's prompt is its errand; the owner's message is only its input's record.
@@ -4437,18 +4616,18 @@ ${JSON.stringify(result, null, 2)}`);
         if (live()) progress(turn);
       }, "onActivity"),
       ask: /* @__PURE__ */ __name((request) => live() ? ask(roomId, turn, input.sender, request) : Promise.reject(turnEnded2()), "ask"),
-      state: driverState(turn.session, open4),
+      state: driverState(turn.session, open5),
       tools: tools2,
-      confirmPickup: /* @__PURE__ */ __name(() => confirmPickup(roomId, turn, open4), "confirmPickup")
+      confirmPickup: /* @__PURE__ */ __name(() => confirmPickup(roomId, turn, open5), "confirmPickup")
     };
   }
   __name(buildTurn, "buildTurn");
-  async function confirmPickup(roomId, turn, open4) {
-    if (!open4()) throw turnEnded2();
+  async function confirmPickup(roomId, turn, open5) {
+    if (!open5()) throw turnEnded2();
     turn.pickingUp = true;
     try {
       const current = await client.getConversation(roomId);
-      if (!open4()) throw turnEnded2();
+      if (!open5()) throw turnEnded2();
       if (!current?.memberIds?.includes(agentId)) {
         loseMembership(room(roomId));
         throw new Error("The agent is no longer a member of this conversation");
@@ -4460,7 +4639,7 @@ ${JSON.stringify(result, null, 2)}`);
         }
         throw new Error("Who can read this encrypted conversation changed");
       }
-      if (!open4()) throw turnEnded2();
+      if (!open5()) throw turnEnded2();
       if (turn.pickUp) await turn.pickUp();
       progress(turn);
     } finally {
@@ -4522,7 +4701,7 @@ ${JSON.stringify(result, null, 2)}`);
     const file = stateFile(session);
     let data = {};
     try {
-      data = JSON.parse(readFileSync6(file, "utf8"));
+      data = JSON.parse(readFileSync7(file, "utf8"));
     } catch {
     }
     const save = /* @__PURE__ */ __name((next) => {
@@ -4552,9 +4731,13 @@ ${JSON.stringify(result, null, 2)}`);
   async function control(current) {
     const consumed = await client.consumeRuntimeSignal(current.id);
     if (consumed.status !== "signal") return;
+    touch();
     const signal = consumed.signal;
     const turn = current.turn;
-    if (signal === "stop_and_drop" || signal === "new_session") void dispose(current.queue.splice(0), "cancel", "stop-and-clear");
+    if (signal === "stop_and_drop" || signal === "new_session") {
+      current.clears = (current.clears ?? 0) + 1;
+      void dispose(current.queue.splice(0), "cancel", "stop-and-clear");
+    }
     if (turn) {
       void dispose(turn.inputs, "cancel", "stopped-before-submit");
       abort(turn, signal === "interrupt" ? "stop" : signal === "stop_and_drop" ? "drop" : "new_session");
@@ -4568,6 +4751,7 @@ ${JSON.stringify(result, null, 2)}`);
       const reset = Promise.all([...sessions].map((session) => resetSession(session).catch(warn("session reset")))).then(() => void 0);
       await (current.resetting = reset.finally(() => {
         current.resetting = void 0;
+        touch();
         pump();
       }));
     }
@@ -4588,9 +4772,8 @@ ${JSON.stringify(result, null, 2)}`);
   __name(scheduleControl, "scheduleControl");
   async function recover() {
     await mlsAsks?.recover().catch(warn("pending encrypted cards"));
-    const records = journal.list();
-    const answered2 = new Set(records.flatMap((record) => record.inputs));
-    const orphans = (await endpoint.listInbound({ states: ["uncertain"] })).filter(({ event }) => event.kind === "message.created" && event.conversationId && !answered2.has(event.id));
+    const records = await outputs();
+    const orphans = (await endpoint.listInbound({ states: ["uncertain"], unanswered: true })).filter(({ event }) => event.kind === "message.created" && event.conversationId);
     for (const roomId of /* @__PURE__ */ new Set([...records.map((record) => record.conversationId), ...orphans.map(({ event }) => event.conversationId)])) {
       const target = room(roomId);
       const work = (async () => {
@@ -4611,6 +4794,7 @@ ${JSON.stringify(result, null, 2)}`);
       })().catch(warn("restart recovery"));
       target.recovering = work.finally(() => {
         target.recovering = void 0;
+        touch();
         pump();
       });
     }
@@ -4619,14 +4803,14 @@ ${JSON.stringify(result, null, 2)}`);
   async function redeliver(record) {
     if (!record.mls) {
       if (record.errand) return finishErrandOutput(record, "refused", "its conversation is not encrypted");
-      if (await settle(record.inputs, "plaintext-output-dropped")) journal.remove(record.turnId);
-      return;
+      return endpoint.finishCompletion(record.turnId, { inputIds: record.inputs, reason: "plaintext-output-dropped" });
     }
     if (!mlsOn) return refuse(record.conversationId, "no-device");
     const sent = await publish(record);
     if (sent === "pending") return;
     if (record.errand) return finishErrandOutput(record, sent);
-    if (await settle(record.inputs, "recovered")) journal.remove(record.turnId);
+    if (record.proactive) return finishProactive(record, sent);
+    await endpoint.finishCompletion(record.turnId, { inputIds: record.inputs, reason: "recovered" });
   }
   __name(redeliver, "redeliver");
   function pendingNotes(roomId) {
@@ -4718,27 +4902,18 @@ ${JSON.stringify(result, null, 2)}`);
       log(`Errand ${id} (tell) kept for the next turn in ${conversationId}.`);
       return true;
     }
-    const turnId2 = `turn-${sha2563(JSON.stringify(["canon.runner.errand", id])).slice(0, 32)}`;
-    const record = {
-      version: 1,
-      turnId: turnId2,
-      conversationId,
-      createdAt,
-      audience: null,
-      inputs: [],
-      text: parsed.text,
-      options: { messageId: keyed().text("final", conversationId, turnId2) },
-      notice: false,
-      errand: id,
-      mls: target.mls
-    };
-    saveOutput(record);
+    const turnId2 = `turn-${sha2564(JSON.stringify(["canon.runner.errand", id])).slice(0, 32)}`;
+    const record = await outsideTurn({ conversationId, turnId: turnId2, text: parsed.text, mls: target.mls, createdAt, errand: id });
     errands.put({ ...base, status: "sending", updatedAt });
-    const delivery = publish(record).then((sent) => {
-      if (sent !== "pending") finishErrandOutput(record, sent);
-    }, warn(`errand ${id}`));
+    const delivery = publish(record).then(async (sent) => {
+      if (sent !== "pending") await finishErrandOutput(record, sent);
+    }).catch(warn(`errand ${id}`));
     posting.add(delivery);
-    void delivery.finally(() => posting.delete(delivery));
+    touch();
+    void delivery.finally(() => {
+      posting.delete(delivery);
+      touch();
+    });
     return true;
   }
   __name(takeErrand, "takeErrand");
@@ -4753,10 +4928,12 @@ ${JSON.stringify(result, null, 2)}`);
     const mode = await endpoint.getConversationContentMode(roomId).catch(missing);
     if (mode === "plaintext") return "it is not encrypted, and the agent takes part only in encrypted conversations";
     if (mode !== "mls-dev-text" || !mlsOn) return "it is an encrypted conversation this runner cannot take part in";
-    return kind === "post" ? { mls: (await currentAudience(roomId)).audience } : {};
+    if (kind !== "post") return {};
+    const { audience, ownerId } = await currentAudience(roomId);
+    return { mls: audience, ownerRoom: conversation.memberIds.length === 2 && conversation.memberIds.includes(ownerId) };
   }
   __name(errandRoom, "errandRoom");
-  function finishErrandOutput(record, sent, reason = "Canon did not accept it") {
+  async function finishErrandOutput(record, sent, reason = "Canon did not accept it") {
     const id = record.errand;
     const known = latest(id) ?? { version: 1, id, kind: "post", conversationId: record.conversationId, createdAt: record.createdAt };
     const ok = sent === "delivered";
@@ -4767,9 +4944,108 @@ ${JSON.stringify(result, null, 2)}`);
       errands?.put({ ...known, status: ok ? "sent" : "refused", ...ok ? {} : { reason }, updatedAt: (/* @__PURE__ */ new Date()).toISOString() });
       log(`Errand ${id} (post) ${ok ? "sent" : `refused: ${reason}`} in ${record.conversationId}.`);
     }
-    journal.remove(record.turnId);
+    await endpoint.finishCompletion(record.turnId);
   }
   __name(finishErrandOutput, "finishErrandOutput");
+  async function outsideTurn(input) {
+    const { conversationId, turnId: turnId2, text: text3, mls: mls2, errand } = input;
+    const record = {
+      turnId: turnId2,
+      conversationId,
+      createdAt: input.createdAt ?? (/* @__PURE__ */ new Date()).toISOString(),
+      inputs: [],
+      text: text3,
+      options: { messageId: keyed().text("final", conversationId, turnId2) },
+      notice: false,
+      ...errand ? { errand } : {},
+      ...input.proactive ? { proactive: true } : {},
+      mls: mls2
+    };
+    await saveOutput(record);
+    return record;
+  }
+  __name(outsideTurn, "outsideTurn");
+  const refusal = /* @__PURE__ */ __name((status, code, message2) => new CanonApiError(status, JSON.stringify({ code, message: message2 })), "refusal");
+  function sendOutside(command) {
+    const { conversationId, text: text3 } = command;
+    if (command.privateContext !== void 0 || command.sourceLabel !== void 0) {
+      return Promise.reject(refusal(400, "ENCRYPTED_TEXT_ONLY", "Encrypted text carries no private context or source label"));
+    }
+    const turnId2 = `turn-${sha2564(JSON.stringify(["canon.runner.communicate", conversationId, command.messageId ?? randomUUID2()])).slice(0, 32)}`;
+    const conflict = /* @__PURE__ */ __name(() => refusal(409, "MESSAGE_ID_CONFLICT", "This messageId was already sent with other text"), "conflict");
+    const known = proactive.get(turnId2);
+    if (known) return known.text === text3 ? known.result : Promise.reject(conflict());
+    const result = (async () => {
+      let record = await savedOutput(turnId2);
+      const done = record ? void 0 : await savedOutput(`${turnId2}:sent`);
+      if (record ? record.text !== text3 : done && done.sent.fingerprint !== textFingerprint(text3)) throw conflict();
+      if (done) return sendResult(done.sent.outcome, conversationId, done.options.messageId);
+      if (!record) {
+        const room2 = await errandRoom(conversationId, "post");
+        if (typeof room2 === "string") throw refusal(403, "CONVERSATION_UNAVAILABLE", `This runner cannot send to ${conversationId}: ${room2}`);
+        if (outboundClosed && !room2.ownerRoom) {
+          throw refusal(403, "OUTBOUND_NOT_ALLOWED", "This agent's outbound policy is closed: it answers messages, and writes unprompted only to its owner");
+        }
+        record = await outsideTurn({ conversationId, turnId: turnId2, text: text3, mls: room2.mls, proactive: command.messageId !== void 0 });
+      }
+      const sent = await publish(record);
+      if (sent !== "pending") await finishProactive(record, sent);
+      return sendResult(sent, conversationId, record.options.messageId);
+    })().finally(() => proactive.delete(turnId2));
+    proactive.set(turnId2, { text: text3, result });
+    return result;
+  }
+  __name(sendOutside, "sendOutside");
+  async function finishProactive(record, outcome) {
+    const id = `${record.turnId}:sent`;
+    if (!record.proactive || await savedOutput(id)) return endpoint.finishCompletion(record.turnId);
+    await endpoint.replaceCompletion(record.turnId, toCompletion({
+      turnId: id,
+      conversationId: record.conversationId,
+      createdAt: record.createdAt,
+      inputs: [],
+      text: "",
+      options: { messageId: record.options.messageId },
+      notice: false,
+      sent: { fingerprint: textFingerprint(record.text), outcome }
+    }));
+  }
+  __name(finishProactive, "finishProactive");
+  function sendResult(sent, conversationId, messageId) {
+    if (sent === "delivered") return { status: "messaged", conversationId, messageId };
+    if (sent === "refused") throw refusal(409, "MESSAGE_REFUSED", "Canon did not accept the message; the conversation's members may have changed");
+    throw refusal(202, "OPERATION_PENDING", "The message is saved and will be sent when Canon is reachable; call again with the same messageId to learn how it went");
+  }
+  __name(sendResult, "sendResult");
+  async function startConversation(command) {
+    if (!mlsOn) throw refusal(403, "MLS_DEVICE_REQUIRED", "This runner has no MLS device, so it can start no conversation");
+    const input = {
+      targetUserId: command.principalId,
+      text: command.text,
+      messageId: command.messageId ?? randomUUID2(),
+      selection: command.selection ?? (command.action === "start_conversation" ? { mode: "new" } : { mode: "latest_or_new" })
+    };
+    const result = await endpoint.startWithheldOpener(input).catch(async (error) => {
+      const { code, operationId } = error;
+      if (code !== "OPERATION_PENDING" || typeof operationId !== "string") throw error;
+      const receipt = await endpoint.waitForOperation(operationId);
+      if (receipt.status !== "succeeded" || !receipt.result) throw error;
+      return receipt.result;
+    });
+    if ("reason" in result) {
+      if (PLAINTEXT_START.includes(result.reason)) throw refusal(403, "ENCRYPTED_ROOM_REQUIRED", "Canon would make that conversation plaintext, so nothing was sent");
+      return { status: result.status, reason: result.reason };
+    }
+    if ("requestId" in result) return { status: result.status, requestId: result.requestId };
+    return {
+      status: "messaged",
+      conversationId: result.conversationId,
+      messageId: result.messageId ?? input.messageId,
+      ...result.created !== void 0 ? { created: result.created } : {},
+      ...result.reused !== void 0 ? { reused: result.reused } : {}
+    };
+  }
+  __name(startConversation, "startConversation");
   const latest = /* @__PURE__ */ __name((id) => errandsById.get(id) ?? errands?.get(id), "latest");
   const openErrand = /* @__PURE__ */ __name((record) => record.kind === "errand" && !!record.conversationId && !["pending", "cancelled", "expired", "refused", "rejected"].includes(record.status), "openErrand");
   const aliveErrand = /* @__PURE__ */ __name((record) => record.kind === "errand" && (["pending", "running"].includes(record.status) || openErrand(record)), "aliveErrand");
@@ -4784,10 +5060,11 @@ ${JSON.stringify(result, null, 2)}`);
   __name(saveErrand, "saveErrand");
   function enqueueErrand(record) {
     (record.origin ? room(record.origin).errands : localErrands).push(record);
+    touch();
     pump();
   }
   __name(enqueueErrand, "enqueueErrand");
-  const errandTurnId = /* @__PURE__ */ __name((id) => `turn-${sha2563(JSON.stringify(["canon.runner.errand-turn", id])).slice(0, 32)}`, "errandTurnId");
+  const errandTurnId = /* @__PURE__ */ __name((id) => `turn-${sha2564(JSON.stringify(["canon.runner.errand-turn", id])).slice(0, 32)}`, "errandTurnId");
   const errandFacts = /* @__PURE__ */ __name((record) => Object.freeze({
     id: record.id,
     why: record.why,
@@ -4821,10 +5098,10 @@ ${JSON.stringify(result, null, 2)}`);
   }
   __name(contextPrompt, "contextPrompt");
   function openErrands(roomId) {
-    const open4 = [...errandsById.values()].filter((record) => record.conversationId === roomId && openErrand(record));
-    const stale = open4.filter((record) => Date.now() - Date.parse(record.repliedAt ?? record.reachedAt ?? record.updatedAt) > ERRAND_OPEN_MS);
+    const open5 = [...errandsById.values()].filter((record) => record.conversationId === roomId && openErrand(record));
+    const stale = open5.filter((record) => Date.now() - Date.parse(record.repliedAt ?? record.reachedAt ?? record.updatedAt) > ERRAND_OPEN_MS);
     for (const record of stale) saveErrand({ ...record, status: "expired", reason: "no reply within a week" });
-    return open4.filter((record) => !stale.includes(record));
+    return open5.filter((record) => !stale.includes(record));
   }
   __name(openErrands, "openErrands");
   function replied(turn) {
@@ -4859,6 +5136,7 @@ ${JSON.stringify(result, null, 2)}`);
       if (holder.turn === turn) holder.turn = void 0;
       errandTurns.delete(record.id);
       running.delete(done);
+      touch();
       if (origin) {
         rooms.delete(origin.id);
         rooms.set(origin.id, origin);
@@ -4866,6 +5144,7 @@ ${JSON.stringify(result, null, 2)}`);
       pump();
     });
     running.add(done);
+    touch();
   }
   __name(startErrand, "startErrand");
   async function executeErrand(current, turn, record) {
@@ -4967,11 +5246,9 @@ ${JSON.stringify(result, null, 2)}`);
     }
     const kind = failed ? "failed" : "final";
     const out = {
-      version: 1,
       turnId: turn.id,
       conversationId: origin.room,
       createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-      audience: null,
       inputs: [],
       text: text3,
       notice: failed,
@@ -4980,7 +5257,7 @@ ${JSON.stringify(result, null, 2)}`);
       options: { messageId: keyed().text(kind, origin.room, turn.id) }
     };
     try {
-      saveOutput(out);
+      await saveOutput(out);
     } catch (error) {
       warn(`errand ${record.id}: its report could not be journaled; it stays in the record`)(error);
       saveErrand({ ...closing, report: text3, reported: "refused", reason: "its report: it could not be saved for sending" });
@@ -4992,7 +5269,7 @@ ${JSON.stringify(result, null, 2)}`);
       await stopOutput(out);
       const { reported: _reported, ...withheld2 } = latest(record.id) ?? closing;
       saveErrand({ ...withheld2, status: "cancelled", reason: STOPPED_ERRAND[turn.reason] ?? "stopped" });
-    } else if (sent !== "pending") finishErrandOutput(out, sent);
+    } else if (sent !== "pending") await finishErrandOutput(out, sent);
     turn.live.end(sent === "delivered" ? "answered" : stopped() ? "stopped" : "ended");
   }
   __name(deliverReport, "deliverReport");
@@ -5066,7 +5343,7 @@ ${JSON.stringify(result, null, 2)}`);
       if (await endpoint.getConversationContentMode(conversationId).catch(() => "unavailable") !== "mls-dev-text") {
         throw new ConnectorRelayError(403, "CONNECTOR_RELAY_NOT_ENCRYPTED", "The relay serves only encrypted conversations its agent is in");
       }
-      const journaled = journal.list().find((candidate) => candidate.turnId === id);
+      const journaled = await savedOutput(id);
       if (journaled) return { text: journaled.text, record: journaled };
       const { messages } = await readAgain(() => endpoint.query(
         "get_messages",
@@ -5077,22 +5354,20 @@ ${JSON.stringify(result, null, 2)}`);
       const { audience } = await relayRoom(conversationId);
       if (Date.now() >= deadline) throw relayBusy();
       const record = {
-        version: 1,
         turnId: id,
         conversationId,
         createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-        audience: null,
         inputs: [],
         text: text3,
         options: { messageId: id },
         notice: false,
         mls: audience
       };
-      saveOutput(record);
+      await saveOutput(record);
       return { text: text3, record };
     })();
-    const sent = ready.then(({ record, settled }) => settled ?? publish(record).then((result) => {
-      if (result !== "pending") journal.remove(id);
+    const sent = ready.then(({ record, settled }) => settled ?? publish(record).then(async (result) => {
+      if (result !== "pending") await endpoint.finishCompletion(id);
       return result;
     }));
     const entry = { ready, sent };
@@ -5117,7 +5392,7 @@ ${JSON.stringify(result, null, 2)}`);
       client = new CanonClient(options.apiKey, connection.apiBaseUrl, {
         environmentId: connection.environmentId,
         streamUrl: connection.streamUrl,
-        stateDirectory: join7(home, "endpoint"),
+        stateDirectory: join8(home, "endpoint"),
         ...options.client ? { client: options.client } : {},
         // Below Canon's client floor nothing can work, wherever the refusal surfaces: a query, an operation or the stream.
         ...options.onFatal ? { onClientUpdateRequired: /* @__PURE__ */ __name((error) => options.onFatal(error), "onClientUpdateRequired") } : {},
@@ -5165,29 +5440,30 @@ ${JSON.stringify(result, null, 2)}`);
       }
       scope = JSON.stringify([identity.environmentId, agentId, identity.ownershipVersion ?? 0, identity.installationId]);
       if (mlsOn) {
-        mlsIds = createMlsIds(privateKey(join7(home, "runner", options.environmentId, agentId, "mls-ids", `${sha2563(scope).slice(0, 32)}.key`), MLS_ID_KEY_BYTES));
+        mlsIds = createMlsIds(privateKey(join8(home, "runner", options.environmentId, agentId, "mls-ids", `${sha2564(scope).slice(0, 32)}.key`), MLS_ID_KEY_BYTES));
         mlsAsks = createMlsAsks({
           endpoint,
           agentId,
-          directory: join7(home, "runner", options.environmentId, agentId, "asks", sha2563(scope).slice(0, 32)),
+          directory: join8(home, "runner", options.environmentId, agentId, "asks", sha2564(scope).slice(0, 32)),
           assertAudience,
           sessionForDestructive: options.sessionApprovalForDestructive === true,
           log
         }, approvalScope);
       }
-      journal = createCompletedOutputJournal(join7(home, "runner", options.environmentId, agentId, "finals"), scope, {
-        label: "agent runner",
-        validate: /* @__PURE__ */ __name((record) => typeof record.text === "string" && typeof record.options?.messageId === "string" && Array.isArray(record.inputs) && typeof record.notice === "boolean" && (record.mls === void 0 || !!record.mls && typeof record.mls === "object") && (record.parts === void 0 || Number.isSafeInteger(record.parts)) && (record.errand === void 0 || typeof record.errand === "string"), "validate")
-      });
+      await importFinals(
+        join8(home, "runner", options.environmentId, agentId, "finals"),
+        scope,
+        { valid: isOutputFile, save: /* @__PURE__ */ __name((record) => endpoint.saveCompletion(toCompletion(record)), "save"), warn }
+      );
       if (!options.relay && !driver.capabilities.remote) {
         errands = errandJournal(errandsDirectory(home, options.environmentId, agentId));
-        errandScope = sha2563(scope).slice(0, 32);
+        errandScope = sha2564(scope).slice(0, 32);
         const pending = errands.list().filter((record) => record.kind === "tell" && record.status === "pending").sort((a, b) => (a.createdAt ?? "").localeCompare(b.createdAt ?? "") || a.id.localeCompare(b.id));
         for (const note of pending) {
           if (note.scope === errandScope) notes.set(note.conversationId, [...notes.get(note.conversationId) ?? [], note]);
           else settleNote(note.conversationId, note, "expired", void 0, "it was left under another owner or installation");
         }
-        const reports = new Map(journal.list().flatMap((output) => output.errand ? [[output.errand, output]] : []));
+        const reports = new Map((await outputs()).flatMap((output) => output.errand ? [[output.errand, output]] : []));
         for (const record of errands.list().filter(aliveErrand)) {
           const report = reports.get(record.id);
           if (record.scope !== errandScope) saveErrand({ ...record, status: "expired", reason: "it was left under another owner or installation" });
@@ -5227,11 +5503,11 @@ ${JSON.stringify(result, null, 2)}`);
         onError: warn("event stream")
       }));
       if (errands) {
-        const journaled = /* @__PURE__ */ __name((id) => journal.list().some((record) => record.errand === id), "journaled");
+        const journaled = /* @__PURE__ */ __name(async (id) => (await outputs()).some((record) => record.errand === id), "journaled");
         try {
           errandInbox2 = watchErrandInbox(
             errandsDirectory(home, options.environmentId, agentId),
-            { taken: /* @__PURE__ */ __name((id) => errands.has(id) || journaled(id), "taken"), take: takeErrand },
+            { taken: /* @__PURE__ */ __name(async (id) => errands.has(id) || journaled(id), "taken"), take: takeErrand },
             { log }
           );
         } catch (error) {
@@ -5247,7 +5523,10 @@ ${JSON.stringify(result, null, 2)}`);
         }
         warn("recovery")(error);
       }, "onError") }));
+      touch();
+      watchIdle();
     },
+    activity,
     stop() {
       stopping ??= (async () => {
         for (const off of detach.splice(0).reverse()) off();
@@ -5275,13 +5554,15 @@ ${JSON.stringify(result, null, 2)}`);
     },
     async communicate(input) {
       if (!client) throw new Error("Start the runner before sending");
-      return client.communicate(parseCommunicateToolInput(input));
+      const command = parseCommunicateToolInput(input);
+      return activeCall(() => command.action === "message_existing" ? sendOutside(command) : command.action === "start_conversation" || command.action === "start_direct" ? startConversation(command) : client.communicate(command));
     },
     async relayRead(conversationId, page = {}) {
+      touch();
       const limit = page.limit ?? 20;
       if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100) throw new ConnectorRelayError(400, "CONNECTOR_RELAY_INVALID", "limit must be 1 to 100");
       const deadline = page.deadline ?? Date.now() + CONNECTOR_RELAY_ANSWER_WITHIN_MS;
-      return beforeDeadline((async () => {
+      return beforeDeadline(activeCall(async () => {
         const { ownerId } = await relayRoom(conversationId);
         const result = await readAgain(() => endpoint.query("list_messages", { conversationId, limit, ...page.before ? { before: page.before } : {} }), deadline);
         const accepted = result.messages.filter((message2) => !message2.deleted && typeof message2.text === "string" && message2.status === "sent" && Number.isSafeInteger(message2.mlsFeedOrdinal) && message2.mlsFeedOrdinal > 0);
@@ -5293,37 +5574,39 @@ ${JSON.stringify(result, null, 2)}`);
           nextBefore = String(accepted.at(-1).mlsFeedOrdinal);
         }
         return { messages, nextBefore };
-      })(), deadline);
+      }), deadline);
     },
     async relaySend(conversationId, messageId, text3, options2 = {}) {
+      touch();
       if (typeof messageId !== "string" || !ENDPOINT_ID_PATTERN.test(messageId) || messageId.length > 120 || typeof text3 !== "string" || !text3.trim() || Buffer.byteLength(text3) > MLS_DEV_TEXT_MAX_BYTES) {
         throw new ConnectorRelayError(400, "CONNECTOR_RELAY_INVALID", "A send needs a messageId and 1 byte to 32 KiB of text");
       }
       const deadline = options2.deadline ?? Date.now() + CONNECTOR_RELAY_ANSWER_WITHIN_MS;
-      const id = `relay-send-${sha2563(JSON.stringify([conversationId, messageId])).slice(0, 32)}`;
+      const id = `relay-send-${sha2564(JSON.stringify([conversationId, messageId])).slice(0, 32)}`;
       let entry = relaySends.get(id);
       if (!entry) relaySends.set(id, entry = prepareRelaySend(conversationId, id, text3, deadline));
-      const prepared = await beforeDeadline(entry.ready, deadline);
+      const prepared = await beforeDeadline(activeCall(() => entry.ready), deadline);
       if (prepared.text !== text3) throw new ConnectorRelayError(409, "CONNECTOR_RELAY_MESSAGE_CONFLICT", "This messageId was already sent with other text");
-      const sent = await within(entry.sent, Math.max(0, deadline - Date.now()));
+      const sent = await within(activeCall(() => entry.sent), Math.max(0, deadline - Date.now()));
       if (sent === "refused") throw new ConnectorRelayError(409, "CONNECTOR_RELAY_SEND_REFUSED", "Canon did not accept the message; the conversation's members may have changed");
       return { conversationId, messageId, historyMessageId: id, status: sent === "delivered" ? "sent" : "pending" };
     },
     async relayStart(targetUserId, messageId, text3, selection, startOptions = {}) {
+      touch();
       if (typeof targetUserId !== "string" || !targetUserId || targetUserId.length > 200 || targetUserId.includes("/") || typeof messageId !== "string" || !ENDPOINT_ID_PATTERN.test(messageId) || messageId.length > 120 || typeof text3 !== "string" || !text3.trim() || Buffer.byteLength(text3) > MLS_DEV_TEXT_MAX_BYTES) {
         throw new ConnectorRelayError(400, "CONNECTOR_RELAY_INVALID", "A start needs a person or agent, a messageId and 1 byte to 32 KiB of text");
       }
       if (!options.relay || !client) throw new ConnectorRelayError(403, "CONNECTOR_RELAY_UNAVAILABLE", "This runner is not a relay");
       if (!mlsOn) throw new ConnectorRelayError(503, "CONNECTOR_RELAY_NO_DEVICE", "The relay has no MLS device");
       const deadline = startOptions.deadline ?? Date.now() + CONNECTOR_RELAY_ANSWER_WITHIN_MS;
-      const identity = { messageId, historyMessageId: `relay-start-${sha2563(messageId).slice(0, 32)}` };
+      const identity = { messageId, historyMessageId: `relay-start-${sha2564(messageId).slice(0, 32)}` };
       const answer = await within(
-        endpoint.startWithheldOpener({
+        activeCall(() => endpoint.startWithheldOpener({
           targetUserId,
           text: text3,
           messageId: identity.historyMessageId,
           ...selection ? { selection } : {}
-        }).then((result2) => ({ result: result2 }), (error) => ({ error })),
+        })).then((result2) => ({ result: result2 }), (error) => ({ error })),
         Math.max(0, deadline - Date.now())
       );
       if (!answer || "error" in answer && answer.error?.retryable === true) {
@@ -5341,7 +5624,7 @@ ${JSON.stringify(result, null, 2)}`);
       }
       const result = answer.result;
       if ("reason" in result) {
-        if (result.reason === "opening-text-required") {
+        if (PLAINTEXT_START.includes(result.reason)) {
           throw new ConnectorRelayError(403, "CONNECTOR_RELAY_NOT_ENCRYPTED", "The relay serves only encrypted conversations its agent is in");
         }
         return { ...identity, status: result.status, reason: result.reason };
@@ -5373,6 +5656,81 @@ function relayMessage(message2, ownerId) {
 }
 __name(relayMessage, "relayMessage");
 
+// src/runner/wake.ts
+import { constants as constants5 } from "node:fs";
+import { open as open4, realpath as realpath5 } from "node:fs/promises";
+import { isAbsolute as isAbsolute4, resolve as resolve3 } from "node:path";
+var MAX_WAKE_CONFIGURATION_BYTES = 16 * 1024;
+var MAX_WAKE_ROOMS = 32;
+var ROOM_ID = /^[A-Za-z0-9_-]{1,200}$/;
+function isWakeSecret(value) {
+  if (typeof value !== "string" || !/^whsec_[A-Za-z0-9+/]+={0,2}$/.test(value)) return false;
+  const key = Buffer.from(value.slice(6), "base64");
+  return key.length >= 32 && key.length <= 64 && key.toString("base64") === value.slice(6);
+}
+__name(isWakeSecret, "isWakeSecret");
+function parseWakeConfiguration(value) {
+  const invalid2 = /* @__PURE__ */ __name((what) => {
+    throw new Error(`Invalid wake configuration: ${what}`);
+  }, "invalid");
+  if (!value || typeof value !== "object" || Array.isArray(value)) return invalid2("expected a JSON object");
+  const v = value;
+  const keys = ["version", "callbackUrl", "secret", "conversationIds"];
+  if (Object.keys(v).sort().join() !== [...keys].sort().join()) invalid2(`expected ${keys.join(", ")}`);
+  if (v.version !== 1) invalid2("version");
+  let url;
+  try {
+    url = typeof v.callbackUrl === "string" && v.callbackUrl.length <= 2048 ? new URL(v.callbackUrl) : void 0;
+  } catch {
+  }
+  if (!url || url.protocol !== "https:" || url.username || url.password || url.hash) invalid2("callbackUrl: a public https URL, with no credentials or fragment");
+  if (!isWakeSecret(v.secret)) invalid2("secret: whsec_ and the padded base64 of 32 to 64 random bytes");
+  const rooms = v.conversationIds;
+  if (!Array.isArray(rooms) || rooms.length < 1 || rooms.length > MAX_WAKE_ROOMS || rooms.some((id) => typeof id !== "string" || !ROOM_ID.test(id))) {
+    invalid2(`conversationIds: 1 to ${MAX_WAKE_ROOMS} conversation ids`);
+  }
+  return { callbackUrl: url.toString(), secret: v.secret, conversationIds: [...new Set(rooms)].sort() };
+}
+__name(parseWakeConfiguration, "parseWakeConfiguration");
+async function loadWakeConfiguration(path) {
+  const fail2 = /* @__PURE__ */ __name(() => {
+    throw new Error(`The wake configuration must be a private file (0600, owned by this user, not a link): ${path}`);
+  }, "fail");
+  if (typeof path !== "string" || !isAbsolute4(path) || path.includes("\0") || resolve3(path) !== path || await realpath5(path).catch(() => "") !== path) fail2();
+  const windows = process.platform === "win32";
+  if (windows) assertPrivateWindowsFile(path);
+  const file = await open4(path, constants5.O_RDONLY | (constants5.O_NOFOLLOW ?? 0) | (constants5.O_NONBLOCK ?? 0)).catch(() => fail2());
+  let text3;
+  try {
+    const info = await file.stat();
+    if (!info.isFile() || info.nlink !== 1 || info.size < 1 || info.size > MAX_WAKE_CONFIGURATION_BYTES) fail2();
+    if (!windows && (info.uid !== process.getuid?.() || (info.mode & 63) !== 0)) fail2();
+    const bytes = await readBoundedRegularFileHandle(file, MAX_WAKE_CONFIGURATION_BYTES).catch(() => fail2());
+    try {
+      text3 = new TextDecoder("utf-8", { fatal: true }).decode(bytes);
+    } catch {
+      return fail2();
+    }
+  } finally {
+    await file.close();
+  }
+  let value;
+  try {
+    value = JSON.parse(text3);
+  } catch {
+    throw new Error("Invalid wake configuration: not JSON");
+  }
+  return parseWakeConfiguration(value);
+}
+__name(loadWakeConfiguration, "loadWakeConfiguration");
+function parseIdleTimeout(value) {
+  const match = /^(\d{1,7})([smh]?)$/.exec(value.trim());
+  const ms = match ? Number(match[1]) * { "": 1e3, s: 1e3, m: 6e4, h: 36e5 }[match[2]] : NaN;
+  if (!Number.isSafeInteger(ms) || ms < 1e3) throw new Error("--idle-timeout takes a duration of at least 1 second: 90, 90s, 10m or 1h.");
+  return ms;
+}
+__name(parseIdleTimeout, "parseIdleTimeout");
+
 export {
   DriverSessionError,
   ConnectorRelayError,
@@ -5404,5 +5762,8 @@ export {
   writeRelayCredential,
   relayRunnerHome,
   runtimeDescriptor,
-  createRunner
+  createRunner,
+  parseWakeConfiguration,
+  loadWakeConfiguration,
+  parseIdleTimeout
 };